Add Traefik and Caddy configurations for reverse proxy setup and internal HTTP handling.

2026-02-16 11:15:20 +01:00
parent 8c8de541be
commit c7ea1e1aaa
5 changed files with 106 additions and 0 deletions
@@ -0,0 +1,41 @@
+http:
+  routers:
+    # Nextcloud proxy (directly from Traefik to external server)
+    cloud:
+      rule: Host(`cloud.truckwash.dk`)
+      entryPoints: [websecure]
+      service: cloud-svc
+      tls:
+        certResolver: le
+    cloud-http:
+      rule: Host(`cloud.truckwash.dk`)
+      entryPoints: [web]
+      middlewares: [redirect-to-https]
+      service: cloud-svc
+
+    # Dashboard routers are declared via labels; middlewares are defined below.
+
+  middlewares:
+    redirect-to-https:
+      redirectScheme:
+        scheme: https
+    dashboard-auth:
+      basicAuth:
+        # IMPORTANT: Replace REPLACE_WITH_BCRYPT_HASH with a bcrypt/htpasswd hash for user 'truckwash'.
+        # Example command to generate (once Docker is available):
+        #   docker run --rm httpd:2.4-alpine htpasswd -nbB truckwash 'w5j9MlEVz62Exm6r'
+        users:
+          - "truckwash:REPLACE_WITH_BCRYPT_HASH"
+    dashboard-allow-local:
+      ipWhiteList:
+        sourceRange:
+          - 127.0.0.1/32
+          - 10.0.0.0/8
+          - 172.16.0.0/12
+          - 192.168.0.0/16
+
+  services:
+    cloud-svc:
+      loadBalancer:
+        servers:
+          - url: "http://94.130.142.41:11000"